tutorial · bandit

Bandit Level 29

Git repo: inspect commits/branches to find the hidden password.
banditgithistory
Optional narration
Marks this level complete in your browser.

Goal

Clone the repo:

ssh://[email protected]:2220/home/bandit28-git/repo

and find the password for the next level.

Hints

  • If you don’t see it in the current files, check:
    • git log
    • git show <commit>
    • branches: git branch -a
  • Sometimes the password is removed in a later commit; history reveals it.
Solution (click to reveal)

On your local machine:

cd ~/overthewire

git clone ssh://bandit28-git@bandit.labs.overthewire.org:2220/home/bandit28-git/repo bandit28-repo
cd bandit28-repo

git log --oneline
# inspect interesting commits

git show HEAD
# or search history:

git log -p | less

Find the password in the repo content or history.